It is known that the user identifies oneself by a personal identification number 
(PIN) only known to the user in the ideal case. However, this method has the 
disadvantage that the user can easily forget or mistake the number due to the 
multiplicity of numbers to be used. The PIN number is, therefore, frequently noted in 
notebooks or the like which, however, entails a security risk. 

For this reason, biometric identification methods recently have been developed 
in which biometric features of a user are used for the authentication. Such a biometric 
identification is a method for ensuring the allocation and the access of a certain person 
to a system or a location, which is not simple but is convenient and often very secure. 
Compared with the PIN code, the biometric identification has the advantage that it 
cannot be forgotten and the biometric features can be copied only by very elaborate 
measures or not at all. This is because, whereas the PIN code is pure software, there is 
always a more or less unambiguous correlation with the hardware, i.e. with the body of 
the respective user, in the case of biometric features. A possibility of such a biometric 
identification consists in the acquisition of the fingerprint of a finger of the user. The 
user places, for example, the right-hand thumb onto a contact area of an input device 
where the fingerprint patterns are detected with a resolution of approximately 50 ^xm. 
A computer unit compares the acquired fingerprint features such as branches or 
minuscules with the features of stored fingerprints of persons authorized for access. If 
there is a certain degree of correspondence which allows unambiguous identification 
of the user with very high probability, then use is allowed. 

The problem with such fingerprint recognition systems is, however, that the 
finger, especially if it is contaminated, leaves traces on the sensor in the form of the 
fingerprint which, under certain conditions, can lead to recognition of the same 
authorized person during a new access authorization check without the finger having 
been applied again. For example, it is conceivable that using a glove or the like, 
pressure is exerted on the fingerprint sensor with the traces of the finger of the 
preceding authorized user and thus the authorized user is recognized again. This can 
result in possible misuse of the user identification. 

The present invention is, therefore, directed to a method and apparatus for user 
identification using biometric data, particularly fingerprint data, in which an erroneous 
identification due to remaining traces of a preceding identification process is 
prevented. 



Such object is achieved by an identification method having the following steps: 

(I) acquisition of a biometric record of the user and the respective spatial 
position of the biometric data relative to a reference position; 

(II) storage of the biometric record and the associated position data; 

(III) reading out the biometric record and the associated position data of an 
identification process preceding the current identification process; and 

(IV) comparison of the biometric data currently acquired and associated 
position data with the preceding biometric data and associated position data read out 
and rejection of the identification if the biometric data have a defined degree of 
correspondence and the position of the corresponding biometric data corresponds 
within a defined tolerance range. 

The present invention is based on the fact that, as a rule, a user is not able to 
position his finger during a new placement on the sensor with an accuracy of less than 
100 jim in the vertical and horizontal direction. If a corresponding fingerprint with 
corresponding position is acquired during two successive identification processes, it is 
assumed that in the second identification process, the print traces remaining from the 
preceding identification process are being misused and access authorization is refused. 

In an advantageous embodiment of the method of the present invention, a mean 
value of the positions of a number of individual features of the biometric data is 
determined during the acquisition of the biometric record and, during the position 
comparison check of two successive identification processes, these mean position 
values are compared with one another. Since the mean values are subject to less 
spread, for example due to a stretching or compression of the surface of the skin or 
because of the acquisition raster of the pickup device, the tolerance range in which a 
position correspondence is evaluated as misuse, can be selected to be narrower in this 
variant of the method so that unwanted nonrecognition of a finger placed down 
correctly twice in succession becomes more improbable. 

Additional features and advantages of the present invention are describe in, and 
will be apparent from, the following detailed description of the invention and the 
figures. 

BRIEF DESCRIPTION OF THE FIGURES 
Figure 1 shows a diagrammatic block diagram of an exemplary embodiment of 
the apparatus according to the present invention. 



Figure 2 shows a flowchart explaining an exemplary embodiment of the 
method according to the present invention. 

Figure 3 shows a flowchart explaining a further exemplary embodiment of the 
method according to the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

Referring to Figure 1, a fingerprint sensor 1 has a contact area 5 for placing a 
finger (indicated in dashed lines) and acquires the features such as branches or 
minuscules of the fingerprint. A position acquisition device 2 acquires the positions of 
these features relative to a reference position; for example, a coordinate origin of an xy 
coordinate system of the contact area 5. The fingerprint data and associated position 
information thus determined are supplied to a memory 3 and a comparison device 4. 
From the memory 3, the corresponding fingerprint data and position data of the 
preceding fingerprint acquisition are read out and also supplied to the comparison 
device 4. The fingerprint features and their positions are compared there and, in the 
case of a correspondence which is within a tolerance range, the comparison device 4 
evaluates the current fingerprint acquisition or, respectively, the current identification 
process as misuse of fingerprint traces of the last identification process and rejects 
access which is indicated on a display device 6. 

In this method, the present invention is based on the fact that 

(1) old fingerprint traces are no longer of consequence when a new arbitrary 
finger is placed on the area, and are replaced by the new print, and 

(2) a user will not be able to position his finger, when placing it down again, 
with such accuracy that the finger corresponds to the preceding fingerprint within up to 
100 jam or 50 jam in position and direction. 

Since the position of the remaining traces of the earlier fingerprint of the 
preceding identification process cannot shift in space with respect to the sensor, it is 
not only the individual features of the fingerprint such as branches or minuscules but 
also their precise position on the contact area which are stored in the present invention; 
for example, as xy coordinates or as polar coordinates. If, in the case of a new 
fingerprint of a new identification process, corresponding features lie within a 
tolerance range of 50 fim or 100 ^m at the same spatial position, it is highly probable 
that this is not a new placement of a finger of the same person but the features of the 



last print. In this case, access authorization or identification must be refused and the 
user must be requested to place his/her finger again. 

An exemplary embodiment of the method according to the present invention 
will now be explained with reference to the flowchart of Figure 2. 

In a step SI, the biometric data and their associated positions on the contact 
area are acquired. In a step S2 these are stored for use in the user identification 
process following next. In step 3, accordingly, the biometric data and associated 
positions of the preceding identification process are read out. In step S4, a comparison 
is made to determine whether the features and positions of the two successive 
acquisitions, i.e. the fingerprint acquisition of the current user identification process 
and the fingerprint acquisition of the immediately preceding user identification 
process, correspond with each other. If both the features of the fingerprint have a 
defined degree of correspondence and the positions of these features correspond to one 
another within a tolerance range of 50 Jim or 100 (am, the identification is refused (step 
S5). Otherwise, the check continues to step S6 in which a check is made, as in known 
user identification methods, to determine whether the features of the current 
acquisition of the fingerprint correspond to the stored features of fingerprints of certain 
persons; for example, authorized users. If this is not so, identification is refused (step 
S7). Otherwise, identification takes place. 

The variant of the method explained in Figure 3 differs from that shown in 
Figure 2 in that a mean value of the positions of acquired features of the biometric 
record (fingerprint) is calculated and stored in a step SI 1. In step S4, it is then not the 
positions of individual features of the fingerprints but the mean position values of the 
current fingerprint acquisition and the preceding one which are compared with one 
another. This has the advantage that statistic deviations due to stretching or 
compression of the skin or due to the pixel spacing of the contact area 5 of the 
fingerprint sensor are averaged out so that the tolerance range can be selected to be 
smaller; for example, 10 Jim to 20 \im. This reduces the probability of unjustified 
rejections of the identification. 

The present invention provides an improved method for biometric user 
identification in which misuse due to fingerprint traces of a preceding user 
identification which are remaining on the acquisition device can be prevented. The 
present invention can be applied to checking the authorization to use devices such as, 



